0
votes
0answers
63 views

Preserving VPN Flow on ASA + netsh

I have a tcp connection established over a site-site VPN and when the VPN drops it causes errors on the client when sending after the tunnel is re-established. When having this problem before, ...
0
votes
0answers
35 views

Setup Web Applications on Cisco ASA 9.1

I've been looking around the Cisco ASA administration screen with our network admin and haven't found the location where Web Applications can be setup. This seems like it should be a pretty straight ...
0
votes
0answers
59 views

Cisco ASA 5512-x statistic of using “Remote Access VPN”

We had implemented VPN solution for users base on Cisco ASA-51512-x device wirh new OS. Busines want to know about who, how long and when using VPN connection. What is the best practise for that ...
0
votes
1answer
127 views

Cisco ASA 5510 : VPN split tunnel Strange behaviour

I work with a Cisco ASA 5510. I have enabled remote VPN connection with radius Authentication to two different internals networks: 10.1.0.0/16 10.10.0.0/16 from mobile VPN pool 192.168.111.0/24. ...
1
vote
0answers
136 views

Setting up an IPSec VPN with Cisco ASDM

I am trying to set up a VPN remote access with a Cisco ASDM 6.4 for ASA 5505 Version 8.2(5). In order to set up the VPN I followed this steps. After this steps my info look like this: VPN Tunnel ...
0
votes
1answer
125 views

Corrupt file copy Windows 2012 -> VPN -> Windows 2012

I've getting problems copying files from one Windows 2012 server to another via Cisco ASA5505 VPN. I've had a similar setup with Win2008 servers & never saw the problem (same ASA5505 this end) ...
0
votes
0answers
19 views

Making Cisco IPSEC IKE KEY public

I have some OSX users that connect to our Cisco ASA VPN using the built in OSX VPN client. To configure this client I have to provide the Cisco IKE key. I am wanting to know if this key is something I ...
3
votes
2answers
4k views

Cleanest, quickest way to generate a Cisco VPN .pcf file?

What's the most efficient way to generate Cisco VPN .pcf files for distribution to end-users? This is for ASA 5500-series firewalls. Coming from a Mac workstation, I no longer have access to a ...
0
votes
1answer
169 views

Cisco ASA 5505: Clean delete of IPSec tunnel

What is the easiest way to delete a Site2Site IPSec tunnel? The ASDM seemingly does not offer that functionality. I have to go to various tabs to delete the different elements that were created by the ...
0
votes
1answer
145 views

Cisco VPN client software use licenses? [duplicate]

I am doing research into Cisco ASA appliances and SSL/Anyconnect. What is the actual cost to do a VPN with a Firewall by Cisco? I never realized they actually charged and do they charge per ...
0
votes
1answer
191 views

Cisco VPN Concepts - Connection Profiles and Group Policy

I was wondering could someone please explain the main concepts of how Cisco ASA Firewalls implement VPNs please? Specifically what are Connection Profiles and Group Policies used for? i.e. What they ...
0
votes
1answer
125 views

Cisco ASA 5505 in small office configuration

I have a small office network that currently consists of about 10 machines, a gigabit switch, and a router/firewall, in a fairly obvious configuration. I need to add a Cisco ASA 5505 to support a VPN ...
0
votes
2answers
589 views

Exposing the AnyConnect HTTPS service to outside network

We have a Cisco ASA 5505 with firmware ASA9.0(1) and ASDM 7.0(2). It is configured with a public ip address, and when trying to reach it from the outside by HTTPS for AnyConnect VPN, we get the ...
0
votes
1answer
1k views

Cisco SSL VPN authenticating aginast AD via LDAP

I have an ASA 5520 and am trying to set up a remote access SSL VPN authenticating against AD using LDAP. Between these two guides: ...
3
votes
1answer
1k views

Cisco ASA5505 VPN remote-access user cannot connect to other site-to-site subnet

I am connecting to a ASA5505 at from home to the head-office using L2TP VPN. Head-office then connects to a other-office via a site-to-site IPSEC tunnel. When in the head-office (192.168.100.0/24) I ...
1
vote
0answers
794 views

ASA 5505 unable to get Lan2Lan and L2TP VPN's working together

I am connecting a remote ASA to a central site with the following settings: Phase 1 IKE: Encryption: DES Authentication: MD5 DH: DH2 Phase 2: Encryption: DES Authentication: MD5 I was getting the ...
3
votes
0answers
3k views

Cisco ASA Site-to-Site VPN Dropping

I have three sites, Toronto (1.1.1.1), Mississauga (2.2.2.2) and San Francisco (3.3.3.3). All three sites have ASA 5520. All the sites are connected together with two site-to-site VPN links between ...
2
votes
2answers
1k views

How can I prevent inside hosts from taking ISAKMP and IPSec NAT-T ports on 8.4 ASA5510?

I have configured a Remote Access VPN on my ASA5510 running 8.4 and enabled it on the outside interface. For some reason if an inside host uses a VPN client to connect through the firewall they end ...
0
votes
0answers
152 views

Cisco WebVPN RDP Plugin and NLA

I'm having trouble finding anything in Cisco's docs or with Google searches, so I'm hoping someone out in ServerFault land might know. We've recently enabled NLA domain-wide to protect against some ...
1
vote
0answers
450 views

Connecting to a Cisco ASA 5510 with Win 7 VPN client

Is it possible to configure a Cisco ASA 5510 to accept a connection from Windows 7 with the built in VPN client software in Win7 ? I know this question has sorta-been asked before on SF but I'm ...
1
vote
0answers
552 views

MAC OS X VPN client / Certificates / Cisco ASA series

I spent a lot of time surfing the web for the solution, but alas, so I finally concluded that this might be an interesting topic to discover. Here's the task: 1. I need to establish VPN connection ...
2
votes
2answers
462 views

View unknown IPsec pre-shared key

I've inherited a Cisco ASA 5510. It was configured by the company that installed it but I don't have any documentation on it. IPsec VPN is enabled and a pre-shared IKE key is inputted but we do not ...
1
vote
2answers
531 views

Configuring ASA to direct traffic on certain ports to specific outside interface

I have two outside interfaces, A and B. Let's say I want all traffic going in or out on port 1000 and 2000 to be directed to A, while all other traffic should go to B. So client is accessing a web ...
0
votes
2answers
217 views

ASA5505 vs server 2008 R2

We have an asa5505 and I am trying to create an IPsec VPN connection so that our users are able to connect to network when they are out of the office. They will be connecting with the vpn connection ...
1
vote
1answer
138 views

ASA5505 VPN connection

We have a few people that travel (sales reps) and when they are out of the office they need to be able to VPN in. We have an ASA5505 with Security+ and unlimited users. This restricts us to 25 VPN ...
0
votes
2answers
1k views

AES Encryption License for ASA series?

I'm trying to set up a VPN and am struggling a little. I've googled some of the lines in the log and someone suggested that to use AES encryption I have to purchase a license from Cisco. Can anyone ...
1
vote
1answer
874 views

Is turning off Perfect Forward Secrecy a security threat?

I had to disable PFS in the IPsec rules on one of our ASAs to allow Android Gingerbread clients to connect. Does doing so compromise the security of the VPN? Communications are AES-256 or AES-128 with ...
0
votes
1answer
440 views

How to NAT a 192.168.x.x corporate domain on a Cisco ASA to not conlict with VPN remote users LANs

I'd successfully configured an IPSEC VPN as per this question:- How to disable dns doctoring for IPSEC VPN connections for ASA 5510 However I ran into the problem that remote users are often on a ...
2
votes
3answers
2k views

VPN packet capture on ASA5505

Following up from a previous question regarding how to capture packets on the ASA5505 I'm having some difficulty in distinguishing which traffic has come through the VPN and which was generated from ...
1
vote
2answers
1k views

Cisco ASA 5505 VPN - regular translation creation failed for protocol 50 src

I try to vpn from my home network to my company network and this has always worked well until yesterday when I installed a Cisco ASA 5505 at home. Now I can not connect from my home network to my ...
4
votes
3answers
3k views

Does Windows 7 VPN work with a Cisco ASA 5510

We have a Cisco ASA 5510 router and are trying to get a couple users setup for VPN access. They are running Windows 7 x64 at home and cannot install the VPN client we have for our router (it only ...
4
votes
4answers
2k views

Cisco ASA 5505 - need more site-to-site VPNs

I'm using a Cisco ASA 5505 50-user firewall in a co-location facility. The systems at this location are performing monitoring of additional remote sites (also running Pix or ASA devices) I've ...
2
votes
3answers
2k views

Cisco VPN Client Behind ASA 5505

I'm trying to get connected to another ASA via Cisco VPN Client. I am behind an ASA 5505 myself and I am tryihng to VPN to a 5510. I get the message: Secure VPN Connection terminated locally by the ...
5
votes
1answer
1k views

IPv6 over Cisco IPSec VPN?

We use a Cisco ASA 5505 as the firewall and IPSec VPN endpoint on our network. We use split-tunneling to reduce the load on our internet link. In other words, when someone is connected to the VPN ...
1
vote
4answers
6k views

Phase 2 Mismatch when connecting Windows 7 to ASA5505 VPN

I'm trying to stand up a new ASA5505 on our network (previously we used IPCop), and I'm having a bit of an issue getting the VPN to work. I ran through the IPSec VPN wizard in ASDM (6.3) on the ASA ...
0
votes
2answers
2k views

Giving VPN connections access to all locations?

I have asked a similiar question, but didn't get any answers so i am going to try and rephrase. i have 4 locations corporate and 3 remotes when you are at the corporate location, you have full ...
1
vote
1answer
640 views

Cisco ASA 5510 <-> Sonicwall Pro 2040 - IPSec half working

Ok... I'm having a really strange IPSec issue (at least strange to me :-) ). I have a Sonicwall Pro 2040 connected to an ASA 5510. When the traffic initiated from the Sonicwall side of the network, it ...
1
vote
1answer
946 views

Cisco ASA 5520 AnyConnect Essentials License and IPSec Connections [duplicate]

Possible Duplicate: Can you help me with my software licensing question? I'm trying to find the answer to this question, but not really getting anywhere. I'm hoping a ServerFault Cisco ...
0
votes
2answers
3k views

Cisco ASA 5505 does not initiate site to site VPN?

I am using Cisco ASA 5505 to establish a site to site VPN tunnel. The problem is that, my ASA 5505 does not seem to initiate the negotiation but once the device on the other starts the negotiation ...
2
votes
1answer
637 views

Setup Cisco ASAs WebVPN on a different IP Address than the Outside IP

Out customer has a SSL VPN solution called "SSL Explorer", it's a server based application which runs on a DMZ Hosts. Because the Software has been announced to be end-of-life, we want to migrate to ...
0
votes
3answers
840 views

Could my GPRS connection be too slow for IPSec connection?

I'm setting up an IPSec connection from an Westermo MRD310 to our company Cisco ASA5510. We've had many successful setups using this method, creating a tunnel network between a remote location and ...
2
votes
1answer
962 views

Cisco ASA - VPN and Hairpinning

We have 2 sites that will be linked by a IPSEC VPN between 2 Cisco ASAs: Site 1 8Mb ADSL Connection Cisco ASA 505 Site 2 2Mb SDSL Connection Cisco ASA 505 Basically, both sites need access to a ...
1
vote
2answers
559 views

Routing traffic to another internal network

OK, so here is the scenario. I have 4 Locations connected with an MPLS. I have installed an ASA at the primary location which is 10.20.1.0. Traffic is fine internally and to the world, however... I ...
2
votes
1answer
8k views

How can I forward ALL traffic over a site-to-site VPN on Cisco ASA?

I currently have two Cisco ASA 5100 routers. They are at different physical sites and are configured with a site-to-site VPN which is active and working. I can communicate with the subnets on either ...
2
votes
1answer
8k views

Cisco ASA 5505 site to site IPSEC VPN won't route from multiple LANs

Hi I've set up a standard site to site VPN between 2 ASA 5505s (using the wizard in ASDM) and have the VPN working fine for traffic between Site A and Site B on the directly connected LANs. But this ...
2
votes
2answers
9k views

show user list command cisco 5500 ASA

simple issue.. I'm a noob I am running a cisco 5500 ASA which is used to manage a VPN, I need the command used to check the current user list. I think it might be an 'access-list', if so I have no ...
1
vote
1answer
894 views

Route traffic on vpn to another interface on an ASA 5510

I have a ASA 5510 that has about 60-70 vpn tunnels. I have four interfaces on the device: 1)External, 2)192.168.1.0, 3)192.168.2.0, 4) 192.168.3.0 A VPN tunnel is configured from the remote site ...
1
vote
2answers
3k views

Cisco VPN Client dropping connection

Using Windows XP and Cisco VPN client version 5.0.4.xxx to connect to a remote customer site. We are able to establish the connection and start an RDP session, but within 1-2 minutes the connection ...
1
vote
1answer
3k views

Cisco ASA - NATing internal -> internal IP for users on a VPN

RemoteSite (172.16.1.*) | Internet --- InternetUsers | ASA --- LocalUsers (192.168.1.*) | InsideNet (10.1.1.*) | Router | DeeperNet (10.22.22.*) I have a ...